Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: q7WDORSq7yj/SlKN1GOGV78oJuQANMIQ2T3kHfK0Mcw=
Subject key identifier: 1E:F6:63:ED:AB:E5:29:A5:D4:8A:6C:33:E9:9E:03:66:B7:C2:EF:1F
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 0196526DCA9E81A53F8E7034C993EAACDA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0613
Signing time: Sun 20 Apr 2025 09:00:49 +0000
Manifest this update: Sun 20 Apr 2025 09:00:49 +0000
Manifest next update: Mon 21 Apr 2025 09:00:49 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: QNTqtCFi9cFFEYX18JMUrm4GEyXAcwhlXwzhDLLTEWA=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:ca:9e:81:a5:3f:8e:70:34:c9:93:ea:ac:da:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Apr 20 09:00:49 2025 GMT
Not After : Apr 21 09:00:49 2025 GMT
Subject: CN=1ef663edabe529a5d48a6c33e99e0366b7c2ef1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:60:19:14:75:37:af:8e:b4:7c:60:02:43:
04:7c:7c:26:80:3d:d1:62:f7:36:21:f1:00:02:34:
f1:fd:dc:39:17:91:a0:4f:ab:b6:5c:93:98:0e:d1:
ac:7c:b8:d9:98:4a:42:b7:4f:a2:e4:8b:77:d1:12:
04:f3:56:91:cf:6d:72:94:03:df:11:5c:77:3c:28:
a9:24:fd:ac:83:a5:73:69:2d:d9:ab:a4:1f:9c:f3:
2f:5d:61:c8:11:ea:61:92:0e:ca:f5:20:c1:62:af:
00:a3:be:70:73:ee:12:88:e4:44:22:4e:c4:ac:97:
53:00:58:d7:f3:10:d8:d2:02:ba:cc:55:48:e4:e9:
23:99:00:a1:3c:6c:72:5c:e5:d6:b2:06:33:ee:37:
e2:fa:dc:6c:63:5c:ae:e5:9b:f4:0f:31:66:ee:7e:
6a:0a:78:a5:cb:9e:fd:a0:11:51:5c:55:a6:6f:a5:
02:9c:7a:de:9a:cf:3c:87:ca:8d:18:9e:6e:7d:21:
d9:66:4e:b4:8a:27:93:19:ad:1e:7f:b8:6d:43:df:
ee:31:a9:f4:ec:2e:1e:3e:2e:06:98:0a:42:73:19:
b1:14:cc:e8:4e:ad:3e:df:1b:5c:60:ae:ec:90:d1:
08:8a:65:26:ad:94:dc:3e:1c:a2:cd:1e:d4:72:ba:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:63:ED:AB:E5:29:A5:D4:8A:6C:33:E9:9E:03:66:B7:C2:EF:1F
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c1:a7:65:d8:71:cb:c4:a1:0b:5d:65:ad:5c:83:90:0b:ae:
80:6f:6d:90:e8:7c:1b:1b:63:f8:64:73:ad:43:ee:8e:f3:ab:
42:2f:e5:8e:64:76:9f:41:fb:ea:6a:4d:13:c2:ec:06:cf:f0:
3d:8f:1b:87:72:59:16:f3:88:ea:f7:08:13:f1:f3:88:7a:7b:
f1:81:08:d6:30:c5:1b:2a:c4:19:f7:e0:72:29:41:a1:54:69:
b0:82:7f:5f:fa:2f:2e:ce:e1:fe:83:cc:c3:70:2a:cc:1f:3b:
1a:a2:a5:23:05:96:0a:ca:ef:67:6f:a1:43:d0:5e:df:1b:0b:
12:76:cb:32:d0:30:69:af:03:a8:7b:0f:9a:87:ed:7e:60:59:
f9:c0:73:96:04:f1:47:cf:a2:c8:e8:ff:73:2c:56:1c:59:c8:
30:e7:5d:b7:24:e7:2c:98:66:0c:18:85:88:23:a1:c2:35:c1:
d2:39:3f:fd:da:d3:07:29:d3:05:a1:64:3b:3b:50:72:7e:1d:
bd:0e:60:33:c7:f5:8b:d9:5f:70:e6:e2:79:63:4f:5d:7a:e3:
ac:93:ee:3b:8c:f1:d6:fb:82:78:11:4f:ea:e3:a4:b8:57:a3:
d7:16:98:98:70:eb:69:2f:a2:f4:86:00:cc:ff:10:57:85:0b:
45:14:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:10 2025 by rpki-client